[Git][security-tracker-team/security-tracker][master] Track fixed version for smarty4 issues fixed via unstable upload

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8c773b0d by Salvatore Bonaccorso at 2026-11-03T20:28:26+01:00
Track fixed version for smarty4 issues fixed via unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41173,7 +41173,7 @@ CVE-2026-83550 (A flaw was found in postgres-exporter. Due to the blank import o
 CVE-2026-82924 (Improper Control of Interaction Frequency vulnerability in Pusula Comm ...)
 	NOT-FOR-US: Expert Mail
 CVE-2026-82531 (Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vul ...)
-	- smarty4 <unfixed> (bug #1150192)
+	- smarty4 4.5.8-1 (bug #1150192)
 	[trixie] - smarty4 <no-dsa> (Minor issue)
 	[bookworm] - smarty4 <postponed> (minor issue)
 	- smarty3 <unfixed>
@@ -89967,7 +89967,7 @@ CVE-2026-67394 (A critical local privilege escalation via OS command injection v
 CVE-2026-65643 (Eval injection in cPanel 11.138.0.0 and earlier allows remote authenti ...)
 	NOT-FOR-US: cPanel
 CVE-2026-62993 (Smarty is a template engine for PHP, facilitating the separation of pr ...)
-	- smarty4 <unfixed> (bug #1150507)
+	- smarty4 4.5.8-1 (bug #1150507)
 	[trixie] - smarty4 <no-dsa> (Minor issue)
 	[bookworm] - smarty4 <postponed> (Minor issue)
 	- smarty3 <unfixed>
@@ -122286,7 +122286,7 @@ CVE-2026-62996 (Smarty is a template engine for PHP, facilitating the separation
 	NOTE: https://github.com/smarty-php/smarty/pull/1195
 	NOTE: Fixed by: https://github.com/smarty-php/smarty/commit/3c9f77a2e06ce319ae0092496af32cc8f3adc52e (v5.8.4)
 CVE-2026-62992 (Smarty is a template engine for PHP, facilitating the separation of pr ...)
-	- smarty4 <unfixed> (bug #1145020)
+	- smarty4 4.5.8-1 (bug #1145020)
 	[trixie] - smarty4 <no-dsa> (Minor issue)
 	[bookworm] - smarty4 <postponed> (Minor issue)
 	- smarty3 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c773b0d28f672e9664234c702aaf55e43f49aae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c773b0d28f672e9664234c702aaf55e43f49aae
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/3b8794b5/attachment-0001.htm>